Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files via .. (dot dot) sequences in a URL.
| Software | From | Fixed in |
|---|---|---|
| mike_spice / my_calendar | 1.0 | 1.0.x |
| mike_spice / my_calendar | 1.4 | 1.4.x |
| mike_spice / my_calendar | 1.2 | 1.2.x |
| mike_spice / my_calendar | 1.1 | 1.1.x |
| mike_spice / my_calendar | 1.3 | 1.3.x |